Article 11 derogates from the General Product Safety Regulation (GPSR, (EU) 2023/988) for products covered by the CRA on the cybersecurity dimension (CRA takes precedence). Article 12 coordinates with the AI Act (Regulation (EU) 2024/1689): for high-risk AI systems that are also PDEs, compliance with the CRA essential cybersecurity requirements counts toward the AI Act Article 15 accuracy/robustness/cybersecurity obligation (presumption of conformity).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.